CVE-2023-6512

The CVE-2023-6512 issue affects Google Chrome’s Web Browser UI, where an inappropriate implementation in the UI could allow a remote attacker to spoof the contents of an iframe dialog context menu via a crafted HTML page. Affected product/versions include Chrome prior to 120.0.6099.62. The underl...

CVE-2024-0812

CVE-2024-0812 is an issue in Google Chrome/Chromium prior to 121.0.6167.85, described as an inappropriate implementation in Accessibility that could allow remote object corruption via a crafted HTML page (severity High). The Connected documents corroborate that Chromium/Chrome updates addressing ...

CVE-2024-9121

Mode C: Concrete details found. CVE-2024-9121 affects Chromium-based Chrome/Chromium. In Chromium’s V8, an inappropriate implementation allowed out-of-bounds memory access via a crafted HTML page, with a High impact (memory corruption/potential code execution). Public references indicate Chrome/C...

CVE-2024-9369

CVE-2024-9369: Insufficient data validation in Mojo within Google Chrome (Chromium) allowed a remote attacker, who had compromised the renderer process, to perform an out-of-bounds memory write via a crafted HTML page. The issue is confirmed in Chrome/Chromium and has high impact. Public fix/upda...

CVE-2018-18336

CVE-2018-18336 is a use-after-free in the PDFium component of Chromium/Google Chrome prior to version 71.0.3578.80, enabling potential heap corruption via a crafted PDF file. The Arch Linux security advisory ASA-201812-2 (and Debian/DSA-4352-1 apart from other sources) confirm the issue and state...

CVE-2018-6120

CVE-2018-6120 affects Google Chrome’s PDFium component. An integer overflow could cause a heap out-of-bounds write in PDFium, enabling a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted PDF file. Affected version: Chrome prior to 66.0.3359.170. Remediation: upgrade ...

CVE-2021-37958

CVE-2021-37958 affects Google Chrome/Chromium: Inappropriate implementation in Navigation on Windows before 94.0.4606.54 allows a remote attacker to inject scripts/HTML into a privileged page via a crafted HTML page. Connected sources reference Chrome/Chromium updates addressing this issue (e.g.,...

CVE-2021-37986

CVE-2021-37986 is a heap buffer overflow in the Settings component of the Chromium browser engine (Chrome/Chromium) prior to 95.0.4638.54. The issue could allow a remote attacker to trigger heap corruption via a crafted HTML page by interacting with DevTools. Affected product scope includes Chrom...

CVE-2021-4058

CVE-2021-4058 describes a heap buffer overflow in ANGLE used by Google Chrome, prior to version 96.0.4664.93, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. The vulnerability affects Chrome’s ANGLE/WebGL/graphics handling path and has a high CVSS3.1 base s...

CVE-2022-0468

CVE-2022-0468 affects Google Chrome (Chromium-based) Payments: Use-after-free in Payments leading to potential heap corruption via a crafted HTML page. Root cause: improper memory handling in Payments. Impact: remote attacker could exploit heap corruption; CVE entry has a high-risk profile (Chrom...

CVE-2022-3370

CVE-2022-3370 is a Chrome/Chromium vulnerability: a use-after-free in Custom Elements leading to potential heap corruption. Affects Chrome/Chromium prior to version 106.0.5249.91. Exploitation would require a crafted HTML page and could lead to high-severity impact across confidentiality, integri...

CVE-2022-3446

CVE-2022-3446 is a heap buffer overflow in WebSQL within Google Chrome (Chromium) prior to 106.0.5249.119. The vulnerability affects the WebSQL component and could enable heap corruption via a crafted HTML page. Google Chrome’s stable channel update 106.0.5249.119 (and related release notes) indi...

CVE-2022-4437

CVE-2022-4437 describes a heap corruption risk from a use-after-free in Mojo IPC in Google Chrome/Chromium before 108.0.5359.124. A remote attacker could exploit this via a crafted HTML page, leading to potentially arbitrary code execution or crash. The issue is listed as High severity. Public de...

CVE-2023-0703

CVE-2023-0703 is a Type Confusion vulnerability in Chrome/Chromium DevTools. A remote attacker could trigger heap corruption via UI interactions, requiring user participation, in Chrome versions prior to 110.0.5481.77. The issue is fixed in the Chrome 110 security release (and related Debian secu...

CVE-2023-1812

Summary: CVE-2023-1812 affects Google Chrome/Chromium. Vulnerability: Out-of-bounds memory access in DOM Bindings, exploitable via a crafted HTML page, enabling remote attacker impact as described in Chrome/Chromium advisories. Affected versions: prior to 112.0.5615.49. Remediation: upgrade to 11...

CVE-2026-13945

CVE-2026-13945 concerns Google Chrome on Linux where insufficient policy enforcement in Extensions allows UI spoofing via a crafted extension. Affected: Chrome on Linux prior to version 150.0.7871.47. Impact is described as user interaction required for exploitation, enabling UI spoofing without ...

CVE-2021-38018

CVE-2021-38018 affects the Chromium/Chrome navigation component. An inappropriate navigation implementation can allow a remote attacker to spoof a domain via a crafted HTML page. Public advisories and CVE records consistently describe this as a domain spoofing vulnerability in Chromium-based engi...

CVE-2022-0453

CVE-2022-0453 describes a use-after-free in Chrome/Chromium’s Reader Mode prior to 98.0.4758.80, allowing a remote attacker who already compromised the renderer process to potentially trigger heap corruption with a crafted HTML page. The vulnerability affects Chrome/Chromium’s rendering component...

CVE-2022-0465

CVE-2022-0465 concerns a use-after-free in Chrome’s Extensions component, leading to potential heap corruption. The vulnerability affects Google Chrome/Chromium builds before version 98.0.4758.80, with the underlying issue described as a use-after-free in Extensions, which could be triggered by u...

CVE-2022-3041

CVE-2022-3041: Use-after-free in WebSQL of Google Chrome before 105.0.5195.52 allows remote attacker to potentially cause heap corruption via a crafted HTML page. Impacts include high severity across confidentiality, integrity, and availability. Affected software is Google Chrome (WebSQL). Remedi...

CVE-2024-0810

CVE-2024-0810 affects Google Chrome/Chromium DevTools. The issue is an insufficient policy enforcement vulnerability in DevTools that, when a user installs a crafted malicious extension, can leak cross-origin data. Impact is described as medium severity. Affected versions are Chrome/Chromium prio...

CVE-2024-4559

CVE-2024-4559 is a heap buffer overflow in WebAudio used by Google Chrome before version 124.0.6367.155. Multiple connected sources (Debian DSA-5683-1, CNVD-2024-36094, GLSA entries, Astra Linux security bulletin) corroborate this vulnerability in Chromium-based Chrome/WebAudio. Impact is describ...

CVE-2026-13024

CVE-2026-13024 : The issue is in Google Chrome’s Navigation logic, where insufficient validation of untrusted input in the renderer allows a remote attacker who has compromised the renderer process to bypass site isolation via a crafted HTML page. Affected product: Google Chrome (Chromium-based)....

CVE-2026-13030

CVE-2026-13030 affects Google Chrome on Android. It describes an uninitialized use in GPU that could allow a remote attacker to read potentially sensitive data from process memory via a crafted HTML page. Impact is stated as high severity by Chromium, with the version note indicating exposure pri...

CVE-2026-13857

CVE-2026-13857 describes an insecure implementation in Chrome’s Geometry handling that permits a remote attacker to spoof UI via a crafted HTML page, requiring the user to perform specific UI gestures. The vulnerability affects Chrome versions prior to 150.0.7871.47 and can be triggered when a us...

CVE-2026-13942

CVE-2026-13942 affects Google Chrome on ChromeOS prior to 150.0.7871.47, where an inappropriate implementation in the Video Capture component allows a local attacker to perform UI spoofing through a crafted HTML page. The issue is explicitly described across multiple sources as a local vulnerabil...

CVE-2026-14012

This CVE describes a side-channel information leakage in CSS within Google Chrome (Chromium) prior to version 150.0.7871.47. The vulnerability allows a remote attacker to exfiltrate potentially sensitive data from process memory via a crafted HTML page. The affected component is the CSS handling ...

CVE-2018-18350

CVE-2018-18350 is part of a set of Chromium/browser CSP-policy issues fixed in the 71.0.3578.80 update. The described vulnerability is an access/ CSP enforcement bypass in Blink during navigations, allowing a crafted HTML page to bypass content security policy and potentially lead to arbitrary co...

CVE-2018-6145

Technical details about CVE-2018-6145 are not publicly available in the provided documents; monitor for updates.

CVE-2021-37956

CVE-2021-37956 describes a use-after-free in Offline use in Google Chrome on Android prior to 94.0.4606.54, where a renderer compromise could potentially enable heap corruption via a crafted HTML page. The connected Debian advisory confirms this CVE is among multiple Chromium issues and provides ...

CVE-2021-37964

CVE-2021-37964 is an Inappropriate implementation vulnerability in ChromeOS Networking within Google Chrome on ChromeOS, prior to version 94.0.4606.54. An attacker with a rogue wireless access point could perform a wifi impersonation attack via a crafted ONC file. Public references confirm the is...

CVE-2021-37966

Technical details for CVE-2021-37966 are not publicly available in the provided connected documents. Monitor for updates; no confirmed exploit vectors, impacted products, or remediation details are present in these sources.

CVE-2022-0462

CVE-2022-0462 involves Google Chrome (Chromium-based) where an inappropriate implementation in Scroll could allow a remote attacker to leak cross-origin data via a crafted HTML page, affecting versions prior to 98.0.4758.80. The issue was addressed in Chrome 98.0.4758.80/98.0.4758.81/98.0.4758.82...

CVE-2022-1633

CVE-2022-1633 : Use-after-free in Sharesheet of Google Chrome on Chrome OS prior to 101.0.4951.64. Exploitation required user interaction with specific UI actions, potentially enabling heap corruption and remote code execution as stated in the vulnerability description. Affected product: Google C...

CVE-2023-1823

CVE-2023-1823 concerns Google Chrome's FedCM: an improper FedCM implementation allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected product/component: Chrome/Chromium FedCM integration. Root cause: Inappropriate implementation in FedCM. Impact: navigation r...

CVE-2023-4358

The CVE-2023-4358 entry concerns a Use-After-Free in DNS in Google Chrome/Chromium before version 116.0.5845.96, enabling remote heap corruption via a crafted HTML page. Affected products include Google Chrome/Chromium (and derivatives); root cause is a DNS-use-after-free. Impact is high (potenti...

CVE-2024-0223

CVE-2024-0223 describes a heap buffer overflow in ANGLE used by Google Chrome/Chromium, allowing potential remote code execution via a crafted HTML page. Affected component: ANGLE within Chromium-based browser code paths prior to version 120.0.6099.199. Impact per sources is high (C/H/I/A) with n...

CVE-2025-0996

Summary (CVE-2025-0996) : An insecure/incorrect implementation in the Chrome Android browser UI allowed a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. The issue affects Chrome on Android prior to version 133.0.6943.98. The root cause is an inappropriate UI implementatio...

CVE-2026-13941

CVE-2026-13941 affects Google Chrome on Android. The vulnerability arises from an inappropriate SiteSettings implementation that enables UI spoofing via a crafted HTML page. Affected version is Chrome for Android before 150.0.7871.47. Impact is UI spoofing (no confidentiality, no data loss per th...

CVE-2026-14062

The CVE-2026-14062 entry concerns Google Chrome on ChromeOS with an incorrect implementation in the Views component, affecting versions prior to 150.0.7871.47. A user convincing a target to install a malicious extension could allow access to potentially sensitive data from process memory via that...

CVE-2018-6086

CVE-2018-6086 is a use-after-free in Google Chrome’s Networking Disk Cache caused by a double-eviction in Incognito mode. The issue affects Chrome/Chromium prior to version 66.0.3359.117 (fixed in the 66.0.3359.117 release, per Debian security advisories and the Chrome stable-channel blog). A rem...

CVE-2018-6116

CVE-2018-6116 concerns a null pointer dereference in WebAssembly within Google Chrome before 66.0.3359.117, enabling a remote attacker to potentially trigger out-of-bounds memory access via a crafted HTML page. Connected advisories confirm the vulnerability as part of Chrome/WebAssembly issues an...

CVE-2021-38005

CVE-2021-38005 affects Google Chrome/Chromium's loader component, with a use-after-free vulnerability prior to 96.0.4664.45 that could enable remote code execution via a crafted HTML page. Affected engines: Chromium-based Chrome/Chromium up to version 96.0.4664.45; root cause: use-after-free in t...

CVE-2021-38009

CVE-2021-38009 affects Chromium/Chrome cache component prior to 96.0.4664.45. Root cause: inappropriate implementation in cache. Impact: remote attacker could leak cross-origin data via crafted HTML. Remediation: upgrade to Chromium/Chrome 96.0.4664.45 or newer (as reflected in Debian/Arch Linux ...

CVE-2022-1873

CVE-2022-1873 applies to Google Chrome where insufficient policy enforcement in COOP allowed cross-origin data leakage via a crafted HTML page. The issue is tied to Chrome versions before 102.0.5005.61. Affected components: Chrome’s COOP handling in cross-origin contexts. Impact per sources: pote...

CVE-2022-2854

CVE-2022-2854: A use-after-free in SwiftShader within Google Chrome/Chromium (pre-104.0.5112.101) could allow a remote attacker to cause heap corruption via a crafted HTML page. The vulnerability is confirmed in Linux distributions (e.g., Debian Chromium package fixed to 104.0.5112.101) and is de...

CVE-2022-4025

CVE-2022-4025 relates to Google Chrome prior to 98.0.4758.80, where an inappropriate implementation in Paint could leak cross-origin data outside an iframe via a crafted HTML page. The vulnerability affects multiple platforms; exploitation would involve a user loading a crafted page to trigger da...

CVE-2024-9120

CVE-2024-9120 is a use-after-free in Dawn within Chromium-based Chrome on Windows, enabling potential heap corruption via a crafted HTML page. Affected software is Google Chrome/Chromium with Dawn integration; the issue has a CVSS v3.1 base score of 8.8 (HIGH) with network attack vector, no privi...

CVE-2021-38012

CVE-2021-38012 : Type confusion in the V8 component of the Chromium-based engine (Chrome before 96.0.4664.45) allows a remote attacker to potentially exploit heap corruption via crafted HTML, enabling arbitrary code execution or browser instability. Connected advisories (Arch/DEBIAN/Vivaldi/Opera...

CVE-2021-38017

CVE-2021-38017 affects Chromium/Google Chrome’s iframe sandbox. Before version 96.0.4664.45, insufficient policy enforcement in the iframe sandbox allowed a remote attacker to bypass navigation restrictions via a crafted HTML page (sandbox escape). The issue is documented across multiple advisori...